Vulnetix
Try Vulnetix Request Demo
CVE-2019-10403 PUBLISHED CVSS 3.5 LOW

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users able to control SCM tag names for these actions.

EPSS 0.34% · 56.5th percentile

Risk Scores

CVSS v2.0
3.5
EPSS Score
0.34%
56.5th percentile

Affected Products

VendorProductVersions
Mavenorg.jenkins-ci.main:jenkins-core0, 2.177
Jenkins projectJenkins2.196 and earlier, LTS 2.176.3 and earlier
jenkinsjenkins0, 0

Timeline

References

Open in Interactive Console →